Looks like you're passing the wrong rules file to yara or there's an encoding problem. You should verify that Zeus.yar is actually a text file and it's all ascii.
On Fri, May 6, 2016 at 3:48 PM, Jehaan Naailah <[email protected]> wrote: > Hi, I have been trying to scan .vmem file with volatility using the yara > pluggin. I downloaded the rules-master file from > https://github.com/Yara-Rules/rules. > However, i keep getting this error message saying cannot compile rules. > Please help. > > -- > You received this message because you are subscribed to the Google Groups > "YARA" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
